Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft
File:                     Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft (raw, json)
Hash identifier:          BdP9ayaC4HEaYB8O3OA4SgWw6q87NqIgxn1zpAi7q8k=
Subject key identifier:   51:79:41:CE:50:32:F4:7E:E8:A0:06:89:29:3F:86:E9:EB:7C:77:8B
Authority key identifier: 2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD
Certificate issuer:       /CN=A91B80C2/serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
Certificate serial:       019E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft
Manifest number:          0187
Signing time:             Fri 17 Apr 2026 04:26:34 +0000
Manifest this update:     Fri 17 Apr 2026 04:26:34 +0000
Manifest next update:     Fri 24 Apr 2026 04:26:34 +0000
Files and hashes:         1: Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl (hash: 3Wpcebspcj3bkPt2WOUH0R3+FsHqcpFcqZ1m4+fGtHU=)
                          2: ECD8F45832C711F1809C448B9A833773.roa (hash: vdA7Y0+FQqP1B/PSwPlcTDY8ijwH4/m6ZdsYH/Ip2Uo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl
                          rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 414 (0x19e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B80C2, serialNumber=2ABA2AA3CB3F94581C5D3D91BA36B8A9D8E8DEAD
        Validity
            Not Before: Apr 17 04:26:34 2026 GMT
            Not After : Apr 24 04:26:34 2026 GMT
        Subject: CN=69e1b67a-89a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b7:5b:cb:0a:be:51:00:3e:4b:ae:b3:9f:8f:
                    b4:82:e1:dd:f8:dc:e2:c5:2f:89:35:77:52:26:22:
                    a6:23:e6:52:8a:e6:ee:de:d2:7c:2c:7b:3d:60:ff:
                    f3:10:aa:6e:eb:89:b9:35:f2:d8:2f:07:61:9b:34:
                    7f:3c:d7:88:e1:e1:e8:38:2f:f9:d1:4b:84:89:2f:
                    4c:cc:87:78:8e:60:c7:67:5e:d1:94:85:ff:7e:d7:
                    17:7d:6e:2f:d4:4f:10:a5:89:b0:f7:68:f2:cb:97:
                    a8:e2:68:99:c1:42:43:46:de:98:4c:72:0a:c6:11:
                    2c:7f:25:91:77:2b:3a:63:9a:51:e5:16:01:e2:40:
                    2a:6b:ca:a2:c7:5d:18:86:be:fe:f8:fb:58:5d:09:
                    2c:fc:d6:03:bf:a6:bd:88:ab:ad:9b:2b:b3:0f:7b:
                    5b:8e:26:cb:52:5a:fe:16:26:6a:83:c0:a7:e1:f0:
                    d4:12:aa:1d:26:d1:72:45:c2:d5:56:34:0d:83:80:
                    2d:86:2e:c6:dc:a2:d7:ce:86:1e:08:ba:41:49:af:
                    8b:cf:33:4a:f2:32:ed:75:4b:fd:2d:bb:9a:11:52:
                    11:43:04:ec:be:04:0c:76:b8:50:15:5d:bf:25:c1:
                    91:31:70:ce:d3:e7:ea:60:75:6b:4d:51:a0:99:46:
                    94:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:79:41:CE:50:32:F4:7E:E8:A0:06:89:29:3F:86:E9:EB:7C:77:8B
            X509v3 Authority Key Identifier:
                keyid:2A:BA:2A:A3:CB:3F:94:58:1C:5D:3D:91:BA:36:B8:A9:D8:E8:DE:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Kroqo8s_lFgcXT2Ruja4qdjo3q0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B80C2/983E6150171A11EF8657754FC4F9AE02/Kroqo8s_lFgcXT2Ruja4qdjo3q0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:d5:17:8a:85:42:d9:02:d5:12:0d:33:3b:a6:70:ca:41:9d:
         7d:8d:73:cd:f3:5d:fd:af:c1:b1:7d:41:a7:cb:18:36:dc:3d:
         a3:6c:ac:50:be:45:51:bb:1a:fb:64:c4:91:3a:a4:e2:a7:47:
         32:93:0b:be:69:d6:79:b5:e0:19:e5:3d:b7:f7:30:9e:ec:e1:
         8a:0d:30:a6:cc:35:14:30:a1:af:86:37:fd:84:64:01:f5:52:
         50:84:ef:0f:b3:45:06:b1:95:b1:98:4d:ac:aa:be:7c:7a:e4:
         86:e1:7b:f1:fd:60:07:0c:ee:be:20:5f:54:49:46:46:c5:37:
         5a:d4:82:17:12:98:71:98:15:17:eb:70:1a:3a:02:3c:b5:11:
         34:ae:8a:2c:de:a7:b4:67:33:b5:82:03:ae:5b:cb:48:ea:fa:
         b6:7b:50:d5:44:67:0a:27:c9:1b:74:c7:1d:f1:0f:e8:e0:e3:
         88:fb:e9:e0:df:4a:20:df:fd:cc:4c:21:41:6d:b6:f8:ce:20:
         fe:ec:10:71:92:7e:c2:08:a5:b7:03:54:d6:db:96:15:e1:a7:
         7e:77:9f:df:89:ce:ed:ef:9f:ce:7d:b6:76:9c:2f:c7:b9:09:
         70:0d:3a:81:60:12:46:c7:9e:5b:0e:16:e7:9c:65:c7:7e:bb:
         de:96:84:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:08:46 2026 by rpki-client